课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

免费学习该课程！

今天就开通帐号，24,600 门业界名师课程任您挑！

Overflow attacks

Overflow attacks

课程: ISC2 Certified Information Systems Security Professional (CISSP) (2024) Cert Prep

开始一个月试用 购买团队方案

Overflow attacks

“

- [Narrator] When software engineers develop applications, they often set aside specific portions of memory to contain variable content. Users often provide answers to questions that are critical to the application's functioning and fill those memory buffers. If the developer fails to check that the input provided by the user is short enough to fit in the buffer, a buffer overflow occurs. The user content may overflow from the area reserved for input into an area used for other purposes, and unexpected results may take place. The easiest way to show this is with an example, so let's go back to WebGoat. You can see here that we have an application handling wifi charges for hotel rooms. I'm also going to start up the Zap Proxy and then run through this page. I'm going to go ahead and enter my name and a hotel room number and then press submit. Here I am now in the Zap Proxy, which has intercepted my request. I'm going to start walking through this step by step and just review the…

内容